mark: A photo of Mark kneeling on top of the Taal Volcano in the Philippines. It was a long hike. (Default)
Mark Smith ([staff profile] mark) wrote in [site community profile] changelog2009-05-10 02:58 am

[dw-free] Canonicalize the input username.

[commit: http://hg.dwscoalition.org/dw-free/rev/4ac600d84f6f]

Canonicalize the input username.

Patch by [staff profile] mark.

Files modified:
  • cgi-bin/LJ/Widget/ImportChooseSource.pm
--------------------------------------------------------------------------------
diff -r bd7785519454 -r 4ac600d84f6f cgi-bin/LJ/Widget/ImportChooseSource.pm
--- a/cgi-bin/LJ/Widget/ImportChooseSource.pm	Sun May 10 02:31:23 2009 +0000
+++ b/cgi-bin/LJ/Widget/ImportChooseSource.pm	Sun May 10 02:58:55 2009 +0000
@@ -98,7 +98,10 @@ sub handle_post {
     return ( ret => $class->ml( 'widget.importchoosesource.error.nohostname' ) )
         unless $hn;
 
-    my $un = $post->{username};
+    # be sure to sanitize the username
+    my $un = lc $post->{username};
+    $un =~ s/-/_/g;
+
     my $pw = $post->{password};
     return ( ret => $class->ml( 'widget.importchoosesource.error.nocredentials' ) )
         unless $un && $pw;
--------------------------------------------------------------------------------

Post a comment in response:

This account has disabled anonymous posting.
If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org